$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C4676B3058F5B3F9BFB658BBED8F5E76C87614EB.cer File: C4676B3058F5B3F9BFB658BBED8F5E76C87614EB.cer (raw, json) Hash identifier: EZvFwMPR5C1fYBXPb1Ty+/GHWv7l+CohpW6E/G/DaXM= Subject key identifier: C4:67:6B:30:58:F5:B3:F9:BF:B6:58:BB:ED:8F:5E:76:C8:76:14:EB Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 4A5A9D5BD1747FBE9246EB3EC7E1F9CE2A552CED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1123865781596061733/0/C4676B3058F5B3F9BFB658BBED8F5E76C87614EB.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1123865781596061733/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 29 Jun 2026 06:36:24 +0000 Certificate not after: Mon 28 Jun 2027 06:41:24 +0000 Subordinate resources: IP: 43.240.56.0/22 IP: 43.246.112.0/22 IP: 43.247.148.0/22 IP: 45.249.112.0/22 IP: 103.25.40.0/22 IP: 103.35.180.0/22 IP: 103.36.28.0/22 IP: 103.234.244.0/22 IP: 103.244.164.0/22 IP: 150.129.136.0/22 IP: 163.53.48.0/22 IP: 220.158.240.0/22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 Jul 2026 07:06:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:5a:9d:5b:d1:74:7f:be:92:46:eb:3e:c7:e1:f9:ce:2a:55:2c:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Jun 29 06:36:24 2026 GMT Not After : Jun 28 06:41:24 2027 GMT Subject: CN=C4676B3058F5B3F9BFB658BBED8F5E76C87614EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:75:40:1f:a4:d4:9b:27:ee:29:b6:9e:56:28: 7e:1c:ab:d8:89:f4:e2:98:c9:4f:3d:36:1a:65:d2: 9c:cf:97:6b:70:e9:45:db:8c:6c:6a:27:e9:4d:ee: c8:fa:1c:69:9a:da:48:35:98:ca:c8:9d:cc:f8:ea: 8d:ff:2b:8c:6f:80:93:2c:3b:72:36:62:c4:18:41: 84:4b:74:8f:35:e1:9a:ef:3e:cd:4d:70:6b:60:c1: c1:8d:5c:dd:6f:55:86:c8:d5:3d:bd:26:bc:77:5e: 63:e9:c2:58:1f:7a:61:cd:57:d0:1a:53:31:31:b4: 9f:33:a0:5d:5b:a6:07:ff:35:49:80:ff:9a:7d:ef: 04:90:e8:82:03:64:87:00:7e:2d:19:ed:4e:95:55: db:0a:32:84:7a:78:1c:d8:cf:39:0f:fc:9d:1d:09: 28:13:41:49:6c:e2:49:fe:73:bd:b9:12:fa:bb:84: fa:46:f3:45:05:8a:6c:c6:6e:39:ae:b5:a2:c9:86: aa:bf:e5:c9:25:1c:22:44:fb:d4:fc:51:c0:b9:9c: 7f:36:13:f4:20:cc:0f:6a:28:5e:73:15:bb:5b:9d: 5d:9b:d4:b8:43:19:83:a7:1e:ab:1e:fa:49:ef:4a: e3:55:3e:7e:2a:70:77:2e:38:32:b1:b2:03:fa:47: 18:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C4:67:6B:30:58:F5:B3:F9:BF:B6:58:BB:ED:8F:5E:76:C8:76:14:EB X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1123865781596061733/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1123865781596061733/0/C4676B3058F5B3F9BFB658BBED8F5E76C87614EB.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.240.56.0/22 43.246.112.0/22 43.247.148.0/22 45.249.112.0/22 103.25.40.0/22 103.35.180.0/22 103.36.28.0/22 103.234.244.0/22 103.244.164.0/22 150.129.136.0/22 163.53.48.0/22 220.158.240.0/22 Signature Algorithm: sha256WithRSAEncryption 80:8f:44:f8:ae:19:b0:8e:15:d5:d1:5d:b3:92:a8:0f:98:57: f2:4a:10:06:e4:85:4e:7f:77:09:c3:fc:49:a4:e9:f6:a3:f2: 35:9a:de:66:32:2f:85:28:51:3f:f6:e1:d2:f9:78:95:01:32: ee:c8:39:36:d5:1f:01:e1:6e:8b:ab:eb:73:da:62:44:35:af: f1:3d:94:09:b0:54:60:50:4a:c9:81:32:80:a4:e6:51:d4:bb: d6:66:7d:3f:6b:ac:78:b4:de:43:bd:b1:44:45:18:f9:97:87: 44:03:cb:74:5c:bf:09:ba:c7:9f:3e:83:66:20:57:7b:03:bb: bf:b1:3b:bd:73:7d:3d:cc:87:7d:5d:e2:c4:1a:f0:36:4f:49: 42:dd:ce:68:15:0c:1a:3b:8e:66:82:a8:63:59:40:58:4e:c9: 9b:57:8c:61:87:8b:8e:a0:1d:5f:e0:ae:a6:15:80:8a:ea:61: 61:49:5e:a1:55:c8:6e:bd:46:89:fe:ea:be:d7:82:0a:1f:d3: fa:50:a1:83:bd:ba:7e:5d:b3:1a:23:a1:47:bc:e0:de:91:44: 39:d9:76:4a:fc:b9:32:60:c5:17:21:1a:ca:37:b8:d9:e7:1e: 17:ac:67:2b:a8:45:66:cf:27:3c:19:00:e1:92:55:5b:78:44: 49:96:c4:be -----BEGIN CERTIFICATE----- MIIF6TCCBNGgAwIBAgIUSlqdW9F0f76SRus+x+H5zipVLO0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDYyOTA2MzYyNFoX DTI3MDYyODA2NDEyNFowMzExMC8GA1UEAxMoQzQ2NzZCMzA1OEY1QjNGOUJGQjY1 OEJCRUQ4RjVFNzZDODc2MTRFQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN11QB+k1Jsn7im2nlYofhyr2In04pjJTz02GmXSnM+Xa3DpRduMbGon6U3u yPocaZraSDWYysidzPjqjf8rjG+Akyw7cjZixBhBhEt0jzXhmu8+zU1wa2DBwY1c 3W9VhsjVPb0mvHdeY+nCWB96Yc1X0BpTMTG0nzOgXVumB/81SYD/mn3vBJDoggNk hwB+LRntTpVV2woyhHp4HNjPOQ/8nR0JKBNBSWziSf5zvbkS+ruE+kbzRQWKbMZu Oa61osmGqr/lySUcIkT71PxRwLmcfzYT9CDMD2ooXnMVu1udXZvUuEMZg6ceqx76 Se9K41U+fipwdy44MrGyA/pHGMMCAwEAAaOCAtwwggLYMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMRnazBY9bP5v7ZYu+2PXnbIdhTrMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTEyMzg2NTc4MTU5NjA2MTczMy8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMTIzODY1NzgxNTk2MDYxNzMz LzAvQzQ2NzZCMzA1OEY1QjNGOUJGQjY1OEJCRUQ4RjVFNzZDODc2MTRFQi5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwYQYIKwYBBQUH AQcBAf8EUjBQME4EAgABMEgDBAIr8DgDBAIr9nADBAIr95QDBAIt+XADBAJnGSgD BAJnI7QDBAJnJBwDBAJn6vQDBAJn9KQDBAKWgYgDBAKjNTADBALcnvAwDQYJKoZI hvcNAQELBQADggEBAICPRPiuGbCOFdXRXbOSqA+YV/JKEAbkhU5/dwnD/Emk6faj 8jWa3mYyL4UoUT/24dL5eJUBMu7IOTbVHwHhbour63PaYkQ1r/E9lAmwVGBQSsmB MoCk5lHUu9ZmfT9rrHi03kO9sURFGPmXh0QDy3Rcvwm6x58+g2YgV3sDu7+xO71z fT3Mh31d4sQa8DZPSULdzmgVDBo7jmaCqGNZQFhOyZtXjGGHi46gHV/grqYVgIrq YWFJXqFVyG69Ron+6r7Xggof0/pQoYO9un5dsxojoUe84N6RRDnZdkr8uTJgxRch Gso3uNnnHhesZyuoRWbPJzwZAOGSVVt4REmWxL4= -----END CERTIFICATE-----Generated at Tue Jul 7 10:42:23 2026 by rpki-client